SUNWAY UNIVERSITY // ANNUAL CAPTURE THE FLAG
{2026}
--days
:
--hours
:
--mins
:
--secs
submission format:
sunctf26{y0u_f0und_th3_fl4g}SUNWAY UNIVERSITY // ANNUAL CAPTURE THE FLAG
sunctf26{y0u_f0und_th3_fl4g}> cat ./mission_brief.txt
The flags are hidden. The challenge awaits. SUNCTF 2026 is the Sunway Cybersecurity Club's flagship annual capture-the-flag, back for its third edition and bigger than ever.
It's a jeopardy-style CTF: a board of challenges across web, crypto, reverse engineering, pwn, forensics, OSINT and misc. Every solve captures a flag, every flag scores points, and the sharpest mix of skill, strategy and teamwork climbs the board.
The roster is locked and the board is built. Doors open 08:00 on Sunday, and the cold hard facts live next door in event.cfg.
> _
> ./run_gameday.sh --verbose
The final standings from SunCTF 2026. The board is archived and read-only; scores include the event's blood bonuses.
| Rank | Team | Score |
|---|---|---|
| Loading final standings… | ||
Results are preserved from the final event scoreboard. Player score breakdowns are available under each team.
> sunctf-fw --list-rules
# check_in
# roll in before 09:30 or the board starts without you
# loadout
# a hacker is only as good as their extension cord
# conduct
# break the challenges, not the rules
# on_site
# see you in the hall
Platinum Sponsor
Firmus is Malaysia’s leading CREST-certified cybersecurity firm, established by industry veterans to deliver comprehensive security assessments, managed services, and strategic consultancy to organizations across the ASEAN region, ensuring resilient digital ecosystems.
Platinum Sponsor · Official Training Partner
Founded in 2005 by industry veteran Fong Choong Fook, LGMS is a premier, publicly listed, and CREST-certified cybersecurity firm in Malaysia. The company specializes in advanced penetration testing, PCI DSS compliance, and digital forensics, delivering world-class security assessments to organizations across the ASEAN region.
Platinum Partner
Glocomp Systems (M) Sdn Bhd is a premier Information and Communication Technology (ICT) infrastructure distributor based in Petaling Jaya, Malaysia. Operating for over two decades, the company has established itself as a leading enterprise tech provider, supplying high-quality digital solutions to both public and private sector clients.
Official Leisure Partner
Sunway Lagoon is Malaysia’s premier multi-park destination, offering over 90 attractions across six adventure zones. From the exhilarating Water Park and Amusement Park to the interactive Wildlife Park, Extreme Park, Scream Park, and Nickelodeon Lost Lagoon, it delivers the ultimate entertainment experience for visitors of all ages.
Official Leisure Partner
Nestled within the lush tropical jungle of Ipoh, Sunway Lost World of Tambun is an action-packed family adventure destination. Featuring a thrilling water park, an amusement park, a tiger valley, and its signature natural hot springs, it offers an immersive eco-adventure experience by day and a relaxing, illuminated retreat by night.
In-kind Sponsor
Located at Sunway Geo Avenue, iTOR is a charming Western-Malaysian fusion cafe. With a playful name that spells “Roti” backwards, this cozy spot is famous for its freshly baked bread and creative menu. Visitors can enjoy unique, comforting offerings like pineapple butter roti, salted egg pasta, and signature honey roasted chicken.
In-kind Sponsor
Sunway Pyramid Ice is Malaysia’s premier and first world-class ice-skating rink, centrally located within the iconic Sunway Pyramid mall. Whether you are a beginner taking your first steps on the ice, a competitive figure skater, or an ice hockey enthusiast, it offers a cool, exhilarating entertainment experience for all skill levels.
Challenge Partner
RE:HACK provides top-tier offensive security and penetration testing services to build resilient digital ecosystems. With a track record of securing major global platforms, they specialize in deep technical consulting, vulnerability research, and empowering the next generation of cybersecurity talent through community training.
Challenge Sponsor
MHHC is an independent community of cybersecurity students and professionals focused on hardware security research, proof-of-concept development, and advanced hardware modifications. Serving as a hub for enthusiasts, they also compete in major international Capture the Flag (CTF) competitions to push the boundaries of hardware hacking, forensics, and reverse engineering.
Every one of them put something real on the table: prize money, training, hardware, venue perks and challenges. Click any card to read who they are, then go say hi at their booths around the hall.
Registration runs 08:00 to 09:30. Seats are pre-assigned, so check in early and find your table. The opening ceremony starts at 09:00 and the board goes live at 10:30.
Nope, SUNCTF 2026 is fully in-person at the venue in event.cfg. Transport there and back is your own arrangement.
Each player: a laptop + charger, ideally with a virtual machine installed (Kali Linux preferred). Each team: at least one extension cord, since outlets are limited. A personal hotspot is recommended but not required.
Yes! Lunch and tea-time refreshments are provided. Lunch is at 12:30 and tea time runs with the closing at 16:00.
just train then lil bro.
Seriously though, that's genuinely the move. The beginner CTF tools on our loot_drop page exist for exactly this: TryHackMe, picoCTF, HackTheBox, OverTheWire. A few weeks of reps and you'll walk into the hall dangerous. There's always a sanity-check-tier challenge with your name on it.
The main channel is the CSC Discord: ping our helpers or ask in #SunCTF2026 for technical difficulties or feedback.
WhatsApp (texting only): Salli +6011-1160 8283 · Sam +6011-3330 1509 · Mustafa +6011-1784 6957.
Email: csc.sunway@gmail.com
Bigger board, bigger turnout. Teams from across Malaysia grinding challenges till the very last minute.
Where it all started. The first flag was planted, the scoreboard survived, and the tradition was locked in.
Doors open 08:00 this Sunday at Sir Jeffrey Cheah Hall. Bring the laptop, bring the extension cord, bring the stamina. Over RM20,000 is on the table.
game_day_agenda